lqwb.sys

Malicious Gui Zou 03:11 PM 06/16/2026

Driver Name: lqwb.sys
SpcSpOpusInfo: adadad; Autel Intelligent Technology Corp., Ltd.
MD5: a85dff16a67e82174f7bfff32138d82a
SHA1: b3871d3601ba715cfef81c3fd465acdb9ae58c75
SHA256: 2002645582076ef42e56eeb307d40d2b8f9257409e856b3acc50eeae1e5262d5
Imphash: 24ae362071b308daf5da290523fb3467
Vhash: 045076651d151666551iz17xz
Authentihash: 724ac563ff3bbf722c9d4dc33e53ecaa13cc3cdca46a0be6e854111b83947134
Rich PE header hash: N/A
SSDEEP: 6144:xMgSDYlsE6/9HlUywpEGox/J3MgSDYlsE6/9HlUywpEGox/JUC:2gSPHSyb6gSPHSybv
TLSH: T11EA46C88A77500BAE97AD1B8D943C22FE6F1B409271C5ACF076885571B233E8953F3B5
PDB path: N/A
Compilation time: 2025-06-18
Country submitter: N/A

Description

Kernel loader that maps an unsigned kernel driver passed from a user agent.

Symbolic name that the uset-agent use to connect to \.\E9CE3CBB